CVE-2023-33906
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
Risk Assessment
The lack of proper permission checks may allow unauthorized access to sensitive data, posing a risk to user privacy.
Recommendation
It is recommended to implement appropriate permission checks in the Contacts Service to prevent unauthorized access to information.
Other vulnerabilities in Contacts Service
See all- CVE-2023-33912Medium
In the Contacts service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
- CVE-2023-33910Medium
In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
- CVE-2023-33907Medium
In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
Original NVD description (English source)
In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Vulnerability data from NVD (NIST) · CISA KEV · EPSS